GHSA-22XC-XG2R-9J7V vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-8FV2-88GG-HM7Q vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-53719 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-FCRP-7GC2-93G7 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-M2V6-2JMH-4C68 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-53714 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-53718 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-53716 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-53717 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-H7PQ-86H8-RP5X vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-53713 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

CVE-2026-53715 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-CXPQ-8V7Q-CG56 vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

GHSA-WCRF-9VRR-854F vulnerabilities

Vulnerabilities for packages: datadog-agent, tigera-operator...

Allocation of Resources Without Limits or Throttling

Overview Affected versions of this package are vulnerable to Allocation of Resources Without Limits or Throttling through improper parsing of W3C baggage HTTP headers in the extraction process. An attacker can exhaust system resources by sending requests with an excessive number of comma-separate...

dd-trace-rb: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

GHSA-WXQQ-GCQ8-C443 dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

dd-trace-js: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

GHSA-MW54-J2V2-42HR dd-trace-py: Improper parsing of W3C baggage headers may lead to DoS

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DDTRACEBAGGAGEMAXITEMS default 64 and DDTRACEBAGGAGEMAXBYTES default 8192 limits were applied only to baggage...

PT-2026-60364

Impact Datadog tracing libraries that implement W3C baggage propagation parse incoming baggage HTTP headers without enforcing item-count or byte-size limits on the extract path. The DD TRACE BAGGAGE MAX ITEMS default 64 and DD TRACE BAGGAGE MAX BYTES default 8192 limits were applied only to bagga...